Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20313532313739.roa
File: 3138352e342e3232322e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier: VvbNatpFBfO5JN9IwxPutI9FjnHgNB7O7ZmCL8RKqKU=
Subject key identifier: F2:C6:EC:54:66:F0:13:F7:DD:3B:92:7A:7E:5A:EA:8F:7D:C1:2D:56
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 31EA19762393D451CCEFC3B686969F08BA5A28DA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20313532313739.roa
Signing time: Sun 07 Jan 2024 04:35:30 +0000
ROA not before: Sun 07 Jan 2024 04:30:30 +0000
ROA not after: Sun 05 Jan 2025 04:35:30 +0000
asID: 152179
IP address blocks: 185.4.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ea:19:76:23:93:d4:51:cc:ef:c3:b6:86:96:9f:08:ba:5a:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 7 04:30:30 2024 GMT
Not After : Jan 5 04:35:30 2025 GMT
Subject: CN=F2C6EC5466F013F7DD3B927A7E5AEA8F7DC12D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:fd:16:5e:5c:15:b0:cd:75:18:c6:72:2e:
d4:fb:35:71:03:33:af:89:b2:f5:d1:20:ab:02:9f:
75:24:89:2f:89:d2:94:65:35:f0:07:dd:6d:57:17:
cc:19:de:e7:1d:e8:ed:6d:38:04:a5:61:80:a4:62:
1e:b6:fd:52:19:ec:4d:28:b0:dd:c1:f8:34:27:b7:
78:be:71:6a:fa:4e:ad:95:f8:d2:bb:43:7b:ab:d1:
50:44:14:ff:b7:af:c1:14:7f:4f:04:ee:55:b8:5f:
83:0e:76:59:92:a9:ba:14:0a:7f:fb:86:80:f0:a4:
3e:2b:8b:48:90:ff:5c:1b:b8:95:9d:9c:26:35:1e:
80:3f:95:56:3c:28:f2:9f:51:b5:05:f6:4b:87:df:
7d:51:35:8f:84:6b:3b:5c:b1:f8:13:8b:45:42:1d:
19:ed:82:82:61:31:05:6f:48:ff:2f:a6:42:38:fe:
b6:01:63:aa:b5:82:03:ae:7d:02:9d:e4:e6:92:37:
11:af:73:5d:a4:5e:06:7c:de:56:03:08:a0:2e:de:
aa:08:64:c6:c8:af:59:1e:09:23:6a:fc:99:1d:25:
a3:5a:39:f9:d7:28:78:c7:fc:bf:01:b0:56:55:4d:
e2:93:29:fb:7e:74:6f:24:2d:2e:99:32:96:c8:95:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:EC:54:66:F0:13:F7:DD:3B:92:7A:7E:5A:EA:8F:7D:C1:2D:56
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.222.0/23
Signature Algorithm: sha256WithRSAEncryption
74:86:53:cb:f2:6c:65:00:4a:30:ff:b4:18:d8:17:d7:ae:2d:
db:95:a4:21:16:bf:85:4f:d5:ed:6b:87:46:82:6a:9d:bf:4d:
97:6d:73:65:27:dd:c3:cb:99:73:89:00:2b:69:08:ae:b5:dd:
f5:ed:5e:4b:8e:27:42:3b:1d:f9:3b:63:37:78:45:06:de:ca:
37:15:cc:0a:e9:35:66:f0:09:09:01:27:fc:91:fe:77:69:44:
10:b6:e0:4c:60:8a:c7:d9:17:c7:f2:87:75:87:41:c2:92:b3:
53:e8:f8:9d:8d:ee:fd:f6:e7:a2:9a:5e:57:93:13:6e:01:3c:
3e:7b:f6:44:79:11:9c:8c:41:7e:bd:15:d8:86:a0:75:bc:46:
46:76:f0:ff:10:b6:47:89:f9:cf:e9:92:9e:5f:cc:d6:d6:c9:
82:d5:10:ba:24:45:d3:ca:7b:87:8a:af:2d:52:c3:eb:44:83:
61:7c:62:f8:57:02:c8:8b:2a:82:0d:eb:1e:30:6e:56:4b:20:
58:3f:eb:6f:a6:7c:30:87:5b:53:55:02:99:a6:cd:aa:dd:b2:
88:8d:98:7d:0d:e2:bb:d9:62:a8:f4:00:84:8c:81:0a:32:80:
6d:7a:7e:1f:16:04:19:40:ac:2a:d3:15:0d:90:71:a2:8e:f3:
2c:da:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 01:12:06 2024 by rpki-client on console-fra.rpki-client.org